Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Iex_HIGWJ1_HZLQFPOxHaTL99kc.roa
File: Iex_HIGWJ1_HZLQFPOxHaTL99kc.roa (raw, json)
Hash identifier: enkXUMri3c9cQM2t5h0xIUwLjyIdr7M8AWfa7hKZxSQ=
Subject key identifier: 21:EC:7F:1C:81:96:27:5F:C7:64:B4:05:3C:EC:47:69:32:FD:F6:47
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A110B9F9B47BEBAE39BA5C5D1DEBD00C16
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Iex_HIGWJ1_HZLQFPOxHaTL99kc.roa
Signing time: Tue 06 Oct 2026 10:19:45 +0000
ROA not before: Tue 06 Oct 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 164.138.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:b9:f9:b4:7b:eb:ae:39:ba:5c:5d:1d:eb:d0:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 6 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21ec7f1c8196275fc764b4053cec476932fdf647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:8d:4c:05:e5:a1:65:df:75:64:85:2d:00:
2d:da:7d:1c:c6:dc:d1:c3:eb:c0:80:27:83:aa:fe:
bb:b2:39:22:86:37:94:b9:38:43:ab:6d:12:dc:eb:
0e:d9:bd:3a:f4:c4:83:25:68:ad:43:05:11:1e:3b:
62:9e:02:6a:9c:1f:ed:de:50:cc:04:b9:5c:d3:75:
ca:c9:0d:ab:8e:d6:47:c5:4f:f0:ed:79:b8:83:86:
d0:fc:bc:de:11:d7:49:dc:36:f3:e1:1c:5f:1d:22:
ce:1e:24:52:c7:e3:f4:3e:53:9f:0f:07:9a:5c:08:
94:e2:db:d2:aa:54:ea:64:7b:b2:c0:59:2b:54:33:
11:e4:cf:bf:e2:ab:99:63:05:47:70:c1:ab:43:fb:
59:6d:9b:3d:88:36:46:23:86:33:f0:9f:b7:f5:29:
86:82:d5:41:0e:2b:ee:76:38:78:b9:65:37:48:1c:
73:e8:20:03:de:49:9a:e7:55:0f:19:28:63:76:fa:
85:20:0f:3d:89:e8:17:b2:fd:82:4b:18:46:d1:b6:
29:f6:85:51:92:60:b7:8b:e7:af:67:49:c4:35:9d:
73:6c:a6:d1:d1:63:70:79:4d:d3:0c:51:cf:7f:a4:
98:ca:f1:0c:45:8d:6d:9d:07:24:65:79:90:00:e5:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:7F:1C:81:96:27:5F:C7:64:B4:05:3C:EC:47:69:32:FD:F6:47
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Iex_HIGWJ1_HZLQFPOxHaTL99kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.6.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f5:c3:ab:30:05:0d:e7:9d:0c:94:51:30:2f:45:2d:00:98:
62:dd:72:74:55:5d:c1:82:34:04:b1:4a:da:83:2d:4c:e5:ac:
b4:28:2e:df:ad:3c:e6:b0:d6:62:c2:c0:06:9f:d8:2f:ee:37:
6a:ed:8e:27:93:d4:5c:5a:cb:74:88:fc:8b:d3:a4:2b:10:7c:
54:e5:be:b3:1e:12:74:b5:1d:64:af:c1:ef:d1:48:2d:b0:37:
f1:09:b1:ec:47:b6:77:9b:c6:36:12:d6:d6:24:07:65:21:cb:
1c:af:ab:bd:bd:62:be:85:64:df:24:cb:71:42:e8:e5:07:d1:
0b:9d:4d:99:5e:ee:94:52:16:7b:f2:16:b1:03:2d:63:b8:37:
a6:76:98:e7:de:f8:6d:7e:75:36:51:fc:20:29:54:b9:17:71:
21:a7:bb:b2:6c:e9:c7:17:f1:45:cc:41:5f:b3:76:73:ad:95:
86:a1:cc:2e:07:01:b2:b2:91:29:ce:1b:37:79:64:6b:a3:7a:
5a:35:ef:c3:fc:be:04:c0:c8:f5:15:1b:af:29:a7:90:49:cc:
58:ce:2a:4a:3f:8a:b2:3a:ab:8b:85:b9:1a:ae:f3:60:dd:69:
3b:0d:7f:2d:43:e3:a1:c4:a6:11:53:be:60:4e:cd:23:46:53:
a0:d5:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:38 2026 by rpki-client